Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: 9mv4mibQNNgithyiw3AGh+LTAOSepuD0w+0ZJP7KZig=
Subject key identifier: EF:F1:DF:77:B6:54:CB:D6:91:CB:C7:B7:FF:35:23:9B:17:E1:E5:16
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019F197A725052E0810DB14BFE811AE28A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 1095
Signing time: Tue 30 Jun 2026 17:01:22 +0000
Manifest this update: Tue 30 Jun 2026 17:01:22 +0000
Manifest next update: Wed 01 Jul 2026 17:01:22 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: dB0/26F3v0HFxXpXTY3dqpWoCnDThY+5le581GZB2+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:72:50:52:e0:81:0d:b1:4b:fe:81:1a:e2:8a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jun 30 17:01:22 2026 GMT
Not After : Jul 1 17:01:22 2026 GMT
Subject: CN=eff1df77b654cbd691cbc7b7ff35239b17e1e516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:80:8a:fd:01:62:90:5d:95:51:46:6e:8a:
6a:aa:53:87:74:fc:11:0f:6c:52:eb:1a:69:db:17:
7e:d1:08:7e:ab:f0:62:77:56:98:17:1d:bf:70:49:
a6:27:e5:7c:a9:76:b5:a5:eb:92:42:9d:f4:99:51:
e0:b8:6a:16:a1:5e:69:a0:fc:e4:46:fe:98:91:4f:
60:08:68:09:77:e6:5d:af:12:4c:7e:59:ac:fd:aa:
fa:38:71:b7:97:4d:ac:df:77:60:ec:a3:f8:8c:62:
ac:31:22:2b:06:c6:59:d9:f1:8c:5d:76:b8:07:40:
89:6e:4e:59:dc:b4:4c:0c:06:9f:fb:58:de:27:ae:
37:69:c4:9a:69:88:c2:d5:f5:c5:64:b6:bc:6c:5d:
f9:0c:35:92:8a:38:e9:80:09:63:b2:42:e1:05:23:
de:c8:7c:a9:ab:00:cd:ec:d1:d3:ca:40:7e:b1:1a:
f0:1b:19:4a:81:da:a9:96:8f:64:4e:63:da:78:81:
92:41:d4:58:02:68:71:c6:19:b8:82:ff:6b:8b:01:
c5:43:d2:54:a6:f6:3b:37:91:c4:5d:74:9f:33:d4:
6c:b4:b4:33:c4:ec:78:c3:1c:64:56:98:1e:b0:b1:
cf:f8:01:6b:a4:f1:a2:6c:a3:02:2f:22:fb:8b:51:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:DF:77:B6:54:CB:D6:91:CB:C7:B7:FF:35:23:9B:17:E1:E5:16
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:98:5d:52:b4:e8:93:0f:1c:a7:63:65:0a:9a:77:fc:d4:a4:
9e:e0:21:74:d9:22:ca:02:b6:6c:17:f4:11:93:40:c6:80:44:
62:02:e8:c3:ca:3d:d0:ee:ac:d1:9e:32:fd:53:56:a0:7d:43:
7b:47:ad:f2:ff:8f:20:a0:16:e0:53:5d:df:9e:86:7f:9a:16:
99:86:1a:d4:a1:85:40:af:09:06:f8:a5:d6:d6:35:5d:04:f4:
1e:05:4f:b3:ba:55:d9:6a:d5:6f:4c:60:64:13:60:18:a5:57:
85:96:90:f3:c4:00:05:a1:25:44:45:e2:8d:8c:2d:28:d4:d0:
04:4e:93:38:1b:a3:a9:34:f1:d0:58:e4:16:2c:f1:6b:70:d7:
63:90:c1:37:2e:d8:40:3e:8d:2d:70:ea:14:9e:d4:ad:e0:3e:
3f:73:0b:db:bc:53:07:d1:65:fe:9f:90:a6:4f:a9:35:3f:ae:
60:7c:cc:fd:a6:06:8c:3f:6c:33:bd:e0:d0:a7:13:1b:8f:d0:
71:33:05:ee:1d:f6:e6:8c:d7:ae:13:f3:02:fc:95:95:8a:db:
b6:f1:53:81:b7:7a:09:04:98:f4:7d:fe:5b:f9:8a:df:ab:7d:
e5:53:aa:14:d3:6d:63:69:b5:e6:f8:f1:4d:48:52:82:d7:ff:
0e:cb:ca:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:00 2026 by rpki-client